Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DNjxApB9MHOaQvSZm5FCqFHfKRg.roa
File: DNjxApB9MHOaQvSZm5FCqFHfKRg.roa (raw, json)
Hash identifier: 3BBKlU8wQbr4aqfiQktXTKtGZ+tLEcxdGTkq+UBH+bY=
Subject key identifier: 0C:D8:F1:02:90:7D:30:73:9A:42:F4:99:9B:91:42:A8:51:DF:29:18
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FF8B247E1863BC50A01A6DC16EEC2
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DNjxApB9MHOaQvSZm5FCqFHfKRg.roa
Signing time: Thu 02 Jan 2025 05:49:39 +0000
ROA not before: Thu 02 Jan 2025 05:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207340
IP address blocks: 93.171.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:f8:b2:47:e1:86:3b:c5:0a:01:a6:dc:16:ee:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cd8f102907d30739a42f4999b9142a851df2918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:98:af:19:a3:08:8c:d3:e1:f0:99:05:7d:
82:1b:6f:0a:b6:5b:fa:f0:12:6a:d4:5d:a9:43:04:
8b:05:7a:b3:29:6f:46:63:60:65:4d:8e:8e:c7:5e:
75:f6:9a:d1:0c:7d:be:cf:e2:d7:de:de:08:78:a6:
1f:5e:34:5a:ea:d3:57:42:41:45:14:9d:f2:4a:bd:
d3:02:01:f7:ed:f9:95:4f:1b:38:48:1b:1f:2b:94:
6c:06:82:2c:0a:89:c2:ef:77:3a:cc:bf:43:d3:5c:
2b:d5:81:9c:4f:e6:e3:58:5c:1d:84:f8:ba:9f:14:
03:77:0e:bd:43:23:13:3f:79:96:60:bc:84:7b:cb:
00:3a:9d:1a:df:c5:f4:cf:af:ef:25:d5:e1:b8:c9:
b8:d9:4d:16:eb:37:cd:b5:7f:35:b1:f1:26:cc:f5:
53:0a:8c:bd:ed:cb:88:b1:dd:a2:2c:96:a6:82:79:
5c:9c:3e:45:85:59:ad:5f:46:12:20:31:f1:e3:cd:
1a:bf:14:1f:a9:b1:87:67:49:ff:d1:d7:b6:4c:92:
ff:20:a2:db:fa:e2:43:5e:11:c4:22:6a:f6:13:d2:
ff:33:7a:34:cd:bf:85:31:e6:89:48:60:27:73:62:
27:ce:2b:ef:fd:1f:76:98:0b:f7:43:0f:17:6c:b0:
d0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D8:F1:02:90:7D:30:73:9A:42:F4:99:9B:91:42:A8:51:DF:29:18
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DNjxApB9MHOaQvSZm5FCqFHfKRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.2.0/23
Signature Algorithm: sha256WithRSAEncryption
82:68:91:9b:6b:0c:d9:04:37:df:ee:2c:18:28:96:ab:d2:21:
3f:fd:f0:e2:37:6c:5f:54:e7:38:c4:87:01:2c:28:06:4c:5c:
41:91:4f:24:a3:25:00:ea:70:1a:8c:05:37:57:9f:bf:5a:17:
ff:c0:ee:94:a7:4c:10:06:1a:e4:a4:a6:23:5b:6e:65:b2:73:
ab:61:13:71:c5:5f:58:e5:d2:45:4d:56:f4:ca:56:6f:e2:65:
3d:6f:33:95:74:a4:21:ab:7a:fd:f8:f2:ae:32:cb:96:77:43:
17:a0:ea:a4:f6:26:8d:61:90:b3:19:b3:ad:fd:6e:c2:49:4e:
df:55:4d:cd:4f:15:12:18:c0:53:ea:84:a9:60:26:4f:dc:07:
4e:32:4b:6f:94:e2:62:91:ec:95:ae:18:ed:b5:c9:4c:fe:27:
b3:38:c7:59:65:0a:4c:2b:29:d0:7b:1b:7f:f2:b0:0a:81:13:
ef:53:5a:75:7e:a3:10:50:ae:1d:9a:5d:6e:7a:03:6d:33:c5:
ac:74:52:06:8f:db:38:61:55:6f:a6:e5:c3:69:34:45:b8:65:
65:6a:61:89:8a:55:4b:a0:0b:b5:8d:fe:9f:4b:ed:e3:4f:a2:
16:bb:a7:82:4c:ca:48:e6:dd:9b:76:8c:43:03:50:c7:e3:9d:
4c:aa:ee:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:27 2025 by rpki-client